OTL logfile created on: 2012-07-13 14:07:23 - Run 2 OTL by OldTimer - Version 3.2.54.0 Folder = C:\Documents and Settings\Zaplecze\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 991,48 Mb Total Physical Memory | 682,14 Mb Available Physical Memory | 68,80% Memory free 1,58 Gb Paging File | 1,39 Gb Available in Paging File | 87,74% Paging File free Paging file location(s): D:\pagefile.sys 718 718 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 15,63 Gb Total Space | 8,68 Gb Free Space | 55,55% Space Free | Partition Type: NTFS Drive D: | 58,90 Gb Total Space | 56,18 Gb Free Space | 95,38% Space Free | Partition Type: NTFS Drive E: | 7,45 Gb Total Space | 7,40 Gb Free Space | 99,28% Space Free | Partition Type: FAT32 Computer Name: NCRLABO | User Name: Zaplecze | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-12 17:26:57 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Zaplecze\Pulpit\OTL.exe PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-04-15 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\freecell.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2009-02-27 19:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012-02-15 00:35:44 | 002,015,968 | ---- | M] (UltraVNC) [Auto | Stopped] -- C:\Program Files\UltraVNC\winvnc.exe -- (uvnc_service) SRV - [2009-07-29 16:19:48 | 000,020,480 | ---- | M] (UPOS System Sp. z o.o.) [On_Demand | Stopped] -- D:\UPOS\Aplikacje\PrePaid\PrePaidServer\PrePaidServer.exe -- (PrePaidServer) SRV - [2009-07-10 14:13:14 | 010,862,671 | ---- | M] (UPOS System sp. z o. o.) [On_Demand | Stopped] -- D:\UPOS\Aplikacje\EK2EFT\Serwer\EFTServer.exe -- (EFTServer) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2010-04-03 12:02:54 | 000,240,608 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\RsFx0150.sys -- (RsFx0150) DRV - [2008-12-02 14:05:34 | 000,118,656 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [2008-04-14 00:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C) DRV - [2008-04-09 08:38:52 | 000,033,032 | ---- | M] (RS232 Touch Panel) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\UtcRs232.sys -- (utcrs232) DRV - [2007-01-16 14:56:00 | 000,450,560 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WlanBZXP.sys -- (SG762_XP) DRV - [2005-03-25 15:04:40 | 002,314,560 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.pl/ [binary data] IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: f:\mozilla\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: f:\mozilla\Mozilla Firefox\plugins [2012-07-11 15:10:08 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Zaplecze\Dane aplikacji\Mozilla\Extensions O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [UTCService] C:\Program Files\TouchUtility\UTCService.exe (TouchUtility) O4 - Startup: C:\Documents and Settings\Zaplecze\Menu Start\Programy\Autostart\Skrót do BOS.lnk = D:\Sygnity Retail\BOS\BOS.exe (Sygnity SA) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1331740981381 (WUWebControl Class) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1331740929266 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{584B8CA7-5225-46ED-8AA4-4248438914A8}: DhcpNameServer = 192.168.1.1 0.0.0.0 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-09-09 10:24:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2011-08-04 18:13:52 | 000,000,110 | -H-- | M] () - E:\autorun.inf -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-13 05:08:21 | 000,000,000 | ---D | C] -- C:\_OTL [2012-07-12 17:26:57 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Zaplecze\Pulpit\OTL.exe [2012-07-11 16:30:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun [2012-07-11 15:10:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Zaplecze\Dane aplikacji\Mozilla [2012-06-26 14:42:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Fugazo [2012-06-26 14:41:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Zaplecze\Menu Start\Programy\World Mosaics 4 [2012-06-26 14:41:11 | 000,000,000 | ---D | C] -- C:\Program Files\FishBone Games [2012-06-26 14:41:10 | 000,000,000 | ---D | C] -- C:\Downloads [2012-06-23 05:35:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Zaplecze\Dane aplikacji\Media Player Classic [2012-06-23 05:28:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\K-Lite Codec Pack [2012-06-23 05:27:55 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-13 07:48:38 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-07-13 07:47:31 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-07-12 17:26:57 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Zaplecze\Pulpit\OTL.exe [2012-07-12 17:05:18 | 000,120,544 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-07-12 11:35:11 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\psd_backup.job [2012-06-30 14:35:34 | 000,000,412 | ---- | M] () -- C:\Documents and Settings\Zaplecze\Moje dokumenty\spider.sav [2012-06-26 14:41:15 | 000,001,833 | ---- | M] () -- C:\Documents and Settings\Zaplecze\Pulpit\World Mosaics 4.lnk [2012-06-23 05:27:21 | 000,003,584 | ---- | M] () -- C:\Documents and Settings\Zaplecze\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-06-26 14:41:15 | 000,001,833 | ---- | C] () -- C:\Documents and Settings\Zaplecze\Pulpit\World Mosaics 4.lnk [2012-06-23 05:28:01 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2012-06-23 05:27:21 | 000,003,584 | ---- | C] () -- C:\Documents and Settings\Zaplecze\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-03-15 13:35:46 | 000,165,256 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2012-03-14 18:41:46 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-03-14 13:45:14 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2009-09-09 11:04:23 | 000,000,414 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol < End of report >